Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e29a01ca-9008-3a6b-a832-8a7eded1572c.roa
File: e29a01ca-9008-3a6b-a832-8a7eded1572c.roa (raw, json)
Hash identifier: Ws0XdlsKpBFIyaCFWVg1x4iXo/zt6ppwrtM4dD6RqoE=
Subject key identifier: EB:DC:1F:BB:30:91:64:C4:7F:B3:AF:7B:A4:F2:8A:BC:11:FF:BF:BF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC56B30EE48173D4CC7976600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e29a01ca-9008-3a6b-a832-8a7eded1572c.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Wed 07 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 207.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c5:6b:30:ee:48:17:3d:4c:c7:97:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Dec 7 05:00:00 2022 GMT
Subject: CN=a336d6b8-44c2-4bcb-ba8c-a856075d8fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:bc:ee:47:4e:67:4f:69:7c:91:3e:7d:21:
0b:fc:21:b9:b8:06:3f:fc:fa:12:e8:5e:5e:79:e7:
f7:1d:e5:0b:92:46:ba:8f:56:e6:06:d4:0a:3a:c7:
ff:8d:e2:02:5c:17:9f:f6:8c:5f:4b:ef:9b:ed:be:
50:6e:95:33:3b:5e:e4:e8:17:b5:e4:1d:99:a2:4f:
3a:2e:bf:ea:34:57:9d:2a:ff:af:ce:bc:68:05:8e:
ae:f6:50:35:09:58:e6:20:6a:2e:14:a4:16:5a:5d:
cd:80:b8:31:77:a2:12:3f:b9:d2:05:fe:88:e2:87:
b5:6b:24:4e:45:ff:23:20:3c:4c:f3:44:a0:ec:6f:
df:05:e4:a2:80:5d:30:98:6a:72:7f:3a:94:cb:7a:
16:e8:a1:6e:a7:88:87:97:42:8e:1b:a7:df:3b:1f:
e3:ff:b4:88:75:62:1a:f9:f5:a8:ac:86:e9:43:49:
b8:c9:cd:be:4e:aa:96:8c:f8:f4:ec:09:28:eb:14:
09:84:91:7f:1f:68:69:09:a5:3a:3e:26:27:93:11:
3c:c8:55:5d:79:3c:b0:e4:34:bb:d3:bb:06:07:2e:
8a:07:69:a0:a9:d1:18:20:10:98:f2:5f:71:f3:b5:
49:3d:e7:95:31:db:50:42:5e:62:87:51:e5:a6:96:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DC:1F:BB:30:91:64:C4:7F:B3:AF:7B:A4:F2:8A:BC:11:FF:BF:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e29a01ca-9008-3a6b-a832-8a7eded1572c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
207.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:c6:6a:f2:7a:82:b3:9a:1b:86:eb:a7:50:a9:bb:f4:14:7a:
4f:c9:d5:f1:5f:fc:6d:32:92:b5:66:81:a7:a9:15:95:e5:75:
31:73:1c:15:b7:c5:94:f9:8e:e8:a8:22:7a:ed:7b:7c:7b:e2:
91:e9:90:57:55:bc:ad:14:40:b6:dc:77:bf:7e:46:80:a0:e0:
43:72:e2:e5:0d:08:ce:79:bb:79:8d:14:d1:e0:c3:3a:d1:db:
a3:8b:a9:2a:c9:a1:6c:a5:bc:37:d2:8b:79:c9:f8:f3:9e:f9:
ea:b3:ea:b0:73:bf:a6:8e:90:79:a6:7c:33:75:1d:31:8c:9f:
85:40:a4:43:4d:ef:4f:f2:fc:5d:bb:5f:ad:a6:c3:cd:97:01:
f9:7e:ca:da:8f:0e:41:ff:77:f8:51:a8:b1:12:5c:ca:69:32:
83:1d:03:be:8f:79:fa:fa:08:ed:04:a5:b2:b5:3b:4a:87:5f:
65:21:48:a5:09:a0:e9:54:b1:57:d2:ff:88:9b:1d:51:94:50:
8a:9e:5a:65:02:fe:a2:79:c1:9d:e6:52:b7:8c:9e:cf:f4:ea:
d5:c9:50:bd:30:45:2b:bf:52:50:07:d7:03:a2:59:b4:3e:28:
bf:1e:17:ec:e8:26:a2:38:f6:d1:a0:49:d8:4b:90:dc:22:44:
5b:63:a1:32
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/FazDuSBc9TMeXZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwMTEyMDAwMFoXDTIyMTIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
YTMzNmQ2YjgtNDRjMi00YmNiLWJhOGMtYTg1NjA3NWQ4ZmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6W87kdOZ09pfJE+fSEL/CG5uAY//PoS6F5e
eef3HeULkka6j1bmBtQKOsf/jeICXBef9oxfS++b7b5QbpUzO17k6Be15B2Zok86
Lr/qNFedKv+vzrxoBY6u9lA1CVjmIGouFKQWWl3NgLgxd6ISP7nSBf6I4oe1ayRO
Rf8jIDxM80Sg7G/fBeSigF0wmGpyfzqUy3oW6KFup4iHl0KOG6ffOx/j/7SIdWIa
+fWorIbpQ0m4yc2+TqqWjPj07Ako6xQJhJF/H2hpCaU6PiYnkxE8yFVdeTyw5DS7
07sGBy6KB2mgqdEYIBCY8l9x87VJPeeVMdtQQl5ih1HlppbCdwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOvcH7swkWTEf7Ove6TyirwR/7+/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZTI5YTAxY2EtOTAwOC0z
YTZiLWE4MzItOGE3ZWRlZDE1NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz/AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAg8Zq8nqCs5obhuunUKm79BR6T8nV8V/8bTKStWaBp6kVleV1MXMcFbfF
lPmO6Kgieu17fHvikemQV1W8rRRAttx3v35GgKDgQ3Li5Q0Iznm7eY0U0eDDOtHb
o4upKsmhbKW8N9KLecn485756rPqsHO/po6QeaZ8M3UdMYyfhUCkQ03vT/L8Xbtf
rabDzZcB+X7K2o8OQf93+FGosRJcymkygx0Dvo95+voI7QSlsrU7SodfZSFIpQmg
6VSxV9L/iJsdUZRQip5aZQL+onnBneZSt4yez/Tq1clQvTBFK79SUAfXA6JZtD4o
vx4X7Ogmojj20aBJ2EuQ3CJEW2OhMg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:54 2025 by rpki-client